SafeMode - Analysis: xn--le-registre-societes-franaises-7vc.fr

Visual Capture

Screenshot of xn--le-registre-societes-franaises-7vc.fr

Detection Info

https://xn--le-registre-societes-franaises-7vc.fr/

Detected Brand

Registre des Sociétés Françaises (Impersonated Government/Administrative Service)

Country

Unknown

Confidence

95%

HTTP Status

200

Report ID

51617f9d-c22…

Analyzed

2026-07-22 07:14

Content Hashes (HTML Similarity)

Used to detect similar phishing pages based on HTML content

Algorithm	Hash Value
CONTENT TLSH	T1BDC1B57670083537506357EABA6127AF24F7816EC90B0F00D3B983658BD6ECAD912163
CONTENT ssdeep	96:Fzoytv4wBlU3wZ0p7Fnb95bmOahAC/FlL+M427AQOO:Fzo2zOKqFb9VaT423

Visual Hashes (Screenshot Similarity)

Used to detect visually similar phishing pages based on screenshots

Algorithm	Hash Value
VISUAL pHash	8c18e6f2c8ecd267
VISUAL aHash	ff00000000ffffff
VISUAL dHash	23f2f3b3f9cc0616
VISUAL wHash	ff00000000ffffff
VISUAL colorHash	03001000180
VISUAL cropResistant	01246b23232b00be,a2808036268080a2,324c4d1656160902,f6f3ebf3b3ebd1f0

Code Analysis

Risk Score 6/100

Threat Level ALTO

⚠️ Phishing Confirmed

🔒 Obfuscation Detected

fromCharCode
unescape

📡 API Calls Detected

POST

📊 Risk Score Breakdown

Total Risk Score

70/100

Contributing Factors

Code Obfuscation

JavaScript code obfuscated using 3 technique(s) to evade detection

🔬 Comprehensive Threat Analysis

Threat Type

Registre des Sociétés Françaises (Impersonated Government/Administrative Service) Phishing Landing Page

Target

Registre des Sociétés Françaises (Impersonated Government/Administrative Service) users

Attack Method

obfuscated JavaScript

Exfiltration Channel

Form submission (backend endpoint not detected - likely JavaScript-based)

Risk Assessment

LOW - Automated credential harvesting with Form submission (backend endpoint not detected - likely JavaScript-based)

⚠️ Indicators of Compromise

3 obfuscation techniques

🏢 Brand Impersonation Analysis

Impersonated Brand

Registre des Sociétés Françaises (Impersonated Government/Administrative Service)

Official Website

N/A

Fake Service

Credential harvesting service

⚔️ Attack Methodology

Primary Method: Search Engine Manipulation

Fake Registre des Sociétés Françaises (Impersonated Government/Administrative Service) site positioned to capture victims through SEO tactics, typosquatting, or paid advertising. Serves as entry point for multi-stage attacks including credential theft and malware distribution.